self-hosted/teleport
self-hosted/teleport
1
0
Fork 0
mirror of https://github.com/gravitational/teleport synced 2024-10-19 08:43:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix the default teleport-kube-agent upgrade server (#27504)

Browse source 
updates.gravitational.io does not exist, but
`updates.releases.teleport.dev does, and is the correct endpoint.
This commit is contained in:
Walt 2023-06-07 09:29:03 -06:00 committed by GitHub
parent eeac10ce27
commit fa2b9dea69
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 8 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
docs/pages/reference/helm-reference/teleport-kube-agent.mdx
View file

@ -162,9 +162,9 @@ You must not enable this if:
### `updater.versionServer`
| Type | Default value | Required? |
|----------|---------------------------------------|---------------------------------|
| `string` | "https://update.gravitational.io/v1/" | Yes if not using Teleport Cloud |
| Type | Default value | Required? |
|----------|---------------------------------------------|---------------------------------|
| `string` | "https://updates.releases.teleport.dev/v1/" | Yes if not using Teleport Cloud |
`updater.versionServer` is the URL of the version server the agent fetches the
target version from. The complete version endpoint is built by concatenating

2
examples/chart/teleport-kube-agent/values.yaml
View file

@ -146,7 +146,7 @@ updater:
# `updater.versionServer` is the URL of the version server the agent fetches
# the target version from. The complete version endpoint is built by
# concatenating `versionServer` and `releaseChannel`.
versionServer: "https://update.gravitational.io/v1/"
versionServer: "https://updates.releases.teleport.dev/v1/"
# Release channel the agent subscribes to.
releaseChannel: "stable/cloud"
image: public.ecr.aws/gravitational/teleport-kube-agent-updater

2
integrations/kube-agent-updater/cmd/teleport-kube-agent-updater/main.go
View file

@ -72,7 +72,7 @@ func main() {
flag.DurationVar(&syncPeriod, "sync-period", 10*time.Hour, "Operator sync period (format: https://pkg.go.dev/time#ParseDuration)")
flag.BoolVar(&insecureNoVerify, "insecure-no-verify-image", false, "Disable image signature verification.")
flag.BoolVar(&disableLeaderElection, "disable-leader-election", false, "Disable leader election, used when running the kube-agent-updater outside of Kubernetes.")
flag.StringVar(&versionServer, "version-server", "https://update.gravitational.io/v1/", "URL of the HTTP server advertising target version and critical maintenances. Trailing slash is optional.")
flag.StringVar(&versionServer, "version-server", "https://updates.releases.teleport.dev/v1/", "URL of the HTTP server advertising target version and critical maintenances. Trailing slash is optional.")
flag.StringVar(&versionChannel, "version-channel", "cloud/stable", "Version channel to get updates from.")
flag.StringVar(&baseImageName, "base-image", "public.ecr.aws/gravitational/teleport", "Image reference containing registry and repository.")

6
rfd/0109-cloud-agent-upgrades.md
View file

@ -72,7 +72,7 @@ their control planes are always compatible with the current version targeted by
The current `cloud-stable` target version will be served via an `s3` bucket backed by CloudFront. Ex:
```
$ VERSION="$(curl --proto '=https' --tlsv1.2 -sSf https://update.gravitational.io/v1/cloud-stable/version)"
$ VERSION="$(curl --proto '=https' --tlsv1.2 -sSf https://updates.releases.teleport.dev/v1/cloud/stable/version)"
```
Formally, this will be the only definition of what the current "cloud-stable" target is. An agent "downgrade" will
@ -123,8 +123,8 @@ is treated as non-critical.
Example usage:
```bash
VERSION="$(curl --proto '=https' --tlsv1.2 -sSf https://update.gravitational.io/v1/cloud-stable/version)"
CRITICAL="$(curl --proto '=https' --tlsv1.2 -sSf https://update.gravitational.io/v1/cloud-stable/critical)"
VERSION="$(curl --proto '=https' --tlsv1.2 -sSf https://updates.releases.teleport.dev/v1/cloud/stable/version)"
CRITICAL="$(curl --proto '=https' --tlsv1.2 -sSf https://updates.releases.teleport.dev/v1/cloud/stable/critical)"
if [[ "$CRITICAL" == "yes" || "$UPGRADE_WINDOW" == "yes" ]]
then